Rockwell Automation CIP Message Handler DoS

🗓️ 30 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 22 Views

CIP Message Handler vulnerability in Rockwell PLCs allows an attacker to trigger service failure via input data processing errors.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-6207	10 Oct 202412:00	–	circl
CNNVD	Rockwell Automation’s various products have security vulnerabilities	14 Oct 202400:00	–	cnnvd
CVE	CVE-2024-6207	14 Oct 202420:53	–	cve
Cvelist	CVE-2024-6207	14 Oct 202420:53	–	cvelist
EUVD	EUVD-2024-47344	3 Oct 202520:07	–	euvd
ICS	Rockwell Automation ControlLogix	10 Oct 202406:00	–	ics
NVD	CVE-2024-6207	14 Oct 202421:15	–	nvd
osv_cve	CVE-2024-6207	14 Oct 202421:15	–	osv_cve
Positive Technologies	PT-2024-7383 · Rockwell Automation · Factorytalk Logix Echo +5	10 Oct 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-6207: Improper Input Validation	14 Oct 202400:00	–	rapid7

Vulners

Node

OR

rockwell_automation controllogix_5580Range35.011–35.013

rockwell_automation guardlogix_5580Range35.011–35.013

rockwell_automation compactlogix_5380Range35.011–35.013

rockwell_automation compactlogix_5480Range35.011–35.013

rockwell_automation controllogix_5580Range28.011–33.017

rockwell_automation controllogix_5580Range34.011–34.014

rockwell_automation controllogix_5580Range36.011–36.011

rockwell_automation controllogix_5580_processRange33.011–33.017

rockwell_automation controllogix_5580_processRange34.011–34.014

rockwell_automation controllogix_5580_processRange35.011–35.013

rockwell_automation controllogix_5580_processRange36.011–36.011

rockwell_automation guardlogix_5580Range31.011–33.017

rockwell_automation guardlogix_5580Range34.011–34.014

rockwell_automation guardlogix_5580Range36.011–36.011

rockwell_automation compactlogix_5380Range28.011–33.017

rockwell_automation compactlogix_5380Range34.011–34.014

rockwell_automation compactlogix_5380Range36.011–36.011

rockwell_automation compact_guardlogix_5380_sil_2Range31.011–33.017

rockwell_automation compact_guardlogix_5380_sil_2Range34.011–34.014

rockwell_automation compact_guardlogix_5380_sil_2Range35.011–35.013

rockwell_automation compact_guardlogix_5380_sil_2Range36.011–36.011

rockwell_automation compact_guardlogix_5380_sil_3Range32.013–33.017

rockwell_automation compact_guardlogix_5380_sil_3Range34.011–34.014

rockwell_automation compact_guardlogix_5380_sil_3Range35.011–35.013

rockwell_automation compact_guardlogix_5380_sil_3Range36.011–36.011

rockwell_automation compactlogix_5480Range32.011–33.017

rockwell_automation compactlogix_5480Range34.011–34.014

rockwell_automation compactlogix_5480Range36.011–36.011

rockwell_automation factorytalk_logix_echoRange33.011–33.017

rockwell_automation factorytalk_logix_echoRange34.011–34.014

rockwell_automation factorytalk_logix_echoRange35.011–35.013

rockwell_automation factorytalk_logix_echoRange36.011–36.011

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-6207
vuldb	www.vuldb.com/
vulners	www.vulners.com/cve/CVE-2024-6207
rockwellautomation	www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1707.html
web	www.web.nvd.nist.gov/view/vuln/detail

30 Oct 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 37.5

CVSS 27.8

EPSS0.00551

cip message handler rockwell automation programmable logic controllers control logix compact logix factorytalk logix echo input data processing service failure